EvilTokens is a criminal of online service which tricks people into thinking they are logging into a real Microsoft website. In reality, this scam allows attackers to take over victims' Microsoft 365 accounts. This service started in 2026 and makes it easier for scammers to target Microsoft 365 users.
EvilTokens Device Code Phishing: How It Works and How to Stop It
About this summary. This is a short, independently written summary of an article first published by Hornetsecurity. Cyber Security News did not report or verify the underlying story. Read the original: https://www.hornetsecurity.com/en/blog/eviltokens-device-code-phishing/
Source attribution: headline and facts are from Hornetsecurity (hornetsecurity.com). Summary method: excerpt of the source description. See our source attribution policy.
Related coverage
Microsoft and partners disrupt vast Chinese-language phishing kit ecosystem
Microsoft collaborated with Japanese authorities, Health-ISAC and several cybersecurity companies to dismantle an expansive, seemingly disconnected ecosystem of…
How device code phishing gives scammers access to your account
You receive an invitation to a password-protected meeting, a secure chatroom, or a shared document. To get access, it says, you need to enter a short code on a sign-in…
Microsoft takes down 3 major phishing platforms used by Chinese cybercriminals
The tech giant worked with Japan’s National Police Agency and healthcare cybersecurity organization Health-ISAC to obtain a U.S. court order seizing and redirecting…
Microsoft Disrupts Chinese-Language Phishing Market Behind 1B+ Messages
Backed by a federal court order, Microsoft and Health-ISAC seized domains powering YAM Store, CoGUI, and Iron Man.
The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrime
Uncovering the shadow world of a phishing kit ecosystem Storm-3119: YAM Store, the power broker Storm-2990: The Iron Man System phishing kit Downstream activity from…
West African scammers targeted in joint international government-industry operation
A joint international law enforcement and industry operation against scammers netted 28 arrests, rescued 117 trafficking victims and led to the takedown of more than 3.7…